update 优化xss注解处理逻辑

ruoyi-common/ruoyi-common-core/src/main/java/com/ruoyi/common/core/xss/Xss.java

@@ -16,9 +16,8 @@ import java.lang.annotation.Target;
 @Target(value = {ElementType.METHOD, ElementType.FIELD, ElementType.CONSTRUCTOR, ElementType.PARAMETER})
 @Constraint(validatedBy = {XssValidator.class})
 public @interface Xss {
-    String message()
 
-            default "不允许任何脚本运行";
+    String message() default "不允许任何脚本运行";
 
     Class<?>[] groups() default {};
 

ruoyi-common/ruoyi-common-core/src/main/java/com/ruoyi/common/core/xss/XssValidator.java

@@ -1,26 +1,21 @@
 package com.ruoyi.common.core.xss;
 
+import cn.hutool.core.util.ReUtil;
+import cn.hutool.http.HtmlUtil;
+
 import javax.validation.ConstraintValidator;
 import javax.validation.ConstraintValidatorContext;
-import java.util.regex.Matcher;
-import java.util.regex.Pattern;
 
 /**
  * 自定义xss校验注解实现
  *
- * @author ruoyi
+ * @author Lion Li
  */
 public class XssValidator implements ConstraintValidator<Xss, String> {
-    private final String HTML_PATTERN = "<(\\S*?)[^>]*>.*?|<.*? />";
 
     @Override
     public boolean isValid(String value, ConstraintValidatorContext constraintValidatorContext) {
-        return !containsHtml(value);
+        return !ReUtil.contains(HtmlUtil.RE_HTML_MARK, value);
     }
 
-    public boolean containsHtml(String value) {
-        Pattern pattern = Pattern.compile(HTML_PATTERN);
-        Matcher matcher = pattern.matcher(value);
-        return matcher.matches();
-    }
 }